Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: JszaImeq6CX4G4PkrHGBUqPGiufdWAnxfiqaYkmjmAA=
Subject key identifier: 0C:05:8C:9F:DD:80:4E:3A:8F:56:A8:F5:32:D1:3A:AC:07:55:6B:E2
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 019A72939EBBD4266B61C9109A30684F5B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: X2AvHMIKHtJy8U8wYv8AqSeNgnzCzO/cfkTjXFQEIkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9e:bb:d4:26:6b:61:c9:10:9a:30:68:4f:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=0c058c9fdd804e3a8f56a8f532d13aac07556be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:ce:ac:6d:68:2f:ce:60:af:bb:fc:5d:a4:
71:68:5f:02:79:a7:6e:b9:fe:2e:24:62:5d:ce:dc:
2a:af:0e:7c:69:dc:95:f4:4c:d1:70:ce:28:28:d2:
3c:3a:05:e8:5c:d7:3a:bb:7e:b1:e4:7d:e4:86:d1:
44:24:95:f5:3f:ce:c8:3e:bc:6a:fa:14:95:a6:0d:
79:88:05:3b:b9:85:9a:88:2c:71:3a:68:ea:03:04:
c4:f9:fc:93:49:74:a5:5a:62:97:47:39:c1:ce:39:
30:3c:bf:bb:64:90:72:ca:fe:62:6a:b2:ab:ff:10:
b8:bd:74:d5:f2:bf:29:bc:3d:15:68:fc:4f:9f:42:
8a:cf:13:b4:3e:51:05:88:e3:8a:f4:3e:a4:61:a6:
66:a4:1c:d1:be:c4:26:24:b9:2d:f6:21:4e:b8:7d:
a4:48:c4:3c:3e:14:0b:dd:fe:82:4c:ab:f5:88:b2:
3b:cb:94:48:52:14:87:6f:44:bd:4c:5c:f8:35:c1:
17:a1:31:4f:45:de:0d:3c:19:b5:ec:b2:05:76:3b:
3f:c4:72:3b:f0:65:a1:3d:e9:20:bf:7b:4f:00:ce:
f1:e6:32:4d:ae:f5:0d:06:f5:1d:9d:05:4f:65:2c:
2d:d2:ee:1b:4b:fc:29:c2:99:c1:26:e4:ae:3d:b5:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:05:8C:9F:DD:80:4E:3A:8F:56:A8:F5:32:D1:3A:AC:07:55:6B:E2
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7c:ac:15:f2:4b:d2:0b:b3:62:75:44:b1:87:33:71:a8:6d:
d7:6b:44:87:c8:39:44:d0:43:c4:46:97:37:17:68:dd:5d:cd:
10:3a:58:3f:c1:7c:0b:30:c1:08:89:4b:23:6a:fe:89:5e:ae:
f1:9b:4c:cf:bc:86:7d:61:df:e7:48:5d:43:72:e1:e7:da:1e:
17:37:8e:94:80:02:04:5d:46:22:04:52:53:02:20:85:27:be:
1d:60:e8:01:0d:10:d1:1e:db:54:93:5e:a7:23:d2:55:67:4e:
c3:f8:fc:6a:f1:7a:55:09:22:4a:30:a2:b2:cd:5a:41:61:b5:
51:f1:c4:ed:ab:ec:59:47:bf:ed:57:94:ec:9b:32:98:7a:9c:
a0:58:4c:51:ac:28:34:67:f8:fd:c0:cb:5e:e6:32:69:22:cc:
ef:6e:27:54:ad:3a:bf:ec:39:07:05:01:a8:d8:35:ce:8b:77:
89:7e:38:b7:a0:dc:fd:13:64:0b:a7:6a:3a:92:93:d3:5b:c3:
20:93:fd:d2:e3:99:62:09:74:bc:a8:02:d1:97:4f:0d:ed:73:
60:eb:40:10:3d:07:d9:52:b0:ab:b1:24:89:92:2d:1f:65:92:
cc:b4:c9:28:1b:b6:96:90:58:c4:a8:7d:78:aa:ed:01:95:a2:
35:fd:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:38 2025 by rpki-client